- cross-posted to:
- [email protected]
- cross-posted to:
- [email protected]
You must log in or # to comment.
Proton is great but I do feel wary from putting all my eggs in one basket again.
Same, staying with bitwarden for now
Bitwarden also has better features for now like more solid URL matching (handy if you have a bunch of services on subdomains of the same domain name).
Hey what type of URL matching do you use for achieving this? BW suggest me all the entries for a domain and doesn’t differentiate sub domains.
You have to set each entry under the same domain to to match against “host” and you’re set.
I use “Host” matching to only target specific subdomains.
I don’t have Bitwarden installed right now but I believe they had a parameter called „starts with“ or something? That has always been solid for me.
Same, staying with keepass for forever
Same. Although the simplelogin integration seems nice.
I discovered not too long ago that Bitwarden has the same integration! https://bitwarden.com/blog/add-privacy-and-security-using-email-aliases-with-bitwarden/
You need to configure it on each device though, and you need to generate an API key first.
I was just about to write this… Proton is cool, but I only use mail from them. All my other services are independent from each other, and soon I will be self hosting most of them.
I’m switching from privatevpn to protonvpn just for the port forwarding with wireguard within a terminal, no stupid GUI app. Quite pleased with the service, they do VPN well.
The backend is proprietary. Avoid.
As all things Proton.
I use their mail system, and it’s pretty good ngl
Best alternative for email?
E2E Encrypted FOSS smoke signals that are only visible on a Time-Based One-Time wavelength of light are the only way.
Even steam proton?
Except anything Valve, which is awesome.
Avoid why?
Because we only know what the client does, and have no clue on the server side of things, allowing Proton to do any manipulations with the data. Not ideal when you consider it for password storage.
if the client is e2ee and you can control that, then why is the server relevant?
Because non-obvious backdoors can be added to the client that break or circumvent encryption (looking at you, xz), stealing all of your passwords, and no one will be able to raise the alarm just by looking at the server code.
Open-source backend allows to generally avoid this situation, while also potentially rendering you able to self-host if you’re paranoid.
and you can control that
Sorry, I meant “assuming one has complete control over the client source” where the remote cannot just change it on you.
I mean they can make a sneaky update to the client that introduces such changes.
Sure, if you won’t update your client, this won’t affect you, but would potentially open you up to other security vulnerabilities.
This was a real concern with MEGA back in the day (after Kim said you should no longer trust them) and a big reason why I prefer to use standalone client apps that I can control the source of.
What should I use then?
Something like Vaultwarden if you care about cloud sync, or KeePassXC if that’s not on your priority list.
Just give me a Linux client for proton drive please. I’m tired of manually uploading/downloading files 😐
Yeeeeees. If you’re orienting your company as the privacy-alternative it’d be great to emphasize support for the main privacy-oriented OS. I get that developers don’t grow on trees, but this seems like a pretty crucial feature that should be prioritized.
I mean, I recently switched to Proton knowing what I was getting into, but I’d really like to see this happen soon.
On the one hand, yes.
On the other, they’re still a for-profit company and Linux users still make up a small portion of their customers.
They likely have a larger portion of Linux users then other companies though.
Meaningless information from a business perspective
I don’t think you have the insider information to really make that call.
The only “Insider information” I have is a public interview with the CEO on a Linux creator’s channel.
Very cool! Thank you for this.
This works with Proton?
On their GitHub:
Supported cloud providers Celeste can currently connect to the following cloud providers:
Dropbox Google Drive Nextcloud Owncloud pCloud Proton Drive WebDAV
That’s pretty cool all things considered I didn’t think a 3rd party client could be made for drive
Neat!
So I installed this and gave it a whirl. I was hoping it would work like the proprietary accounts in Linux where it would integrate into the OS but alas, it appears it’s just a folder sync.
Aside from that I run into the same limitations I run into in the browser where file transfers just fail…
Sticking to OwnCloud and Immich for now…
I tried this before and it was very unreliable when used with WebDAV.
deleted by creator
i tried it recently, and it worked, it may have broken since then though
I’ll still stick with bitwarden, but if I were to introduce someone very tech illiterate, I would probably recommend proton
I’m tech illiterate and been using Bitwarden for 3 years (premium), and honestly it doesn’t work very well on Android. Every time I need to enter a password, it’s completely hit-or-miss with Bitwarden. Half of the time it doesn’t even pop up. I’m using Xiaomi phone and tablet with stock rom (global version).
Should I switch to Proton?
Before switching you should maybe read this and wait for the native app : https://www.reddit.com/r/Bitwarden/comments/1b32bbz/going_native_the_future_of_the_bitwarden_mobile/
Wow thanks, I have no idea. That’s great news. I’ll definitely wait for the native app. But in the meantime I’ll try out Proton as a “backup” just in case something bad happens to Bitwarden or my personal vault.
I have the same issue with Keepass2Android. I think the issue is with Android itself rather than the password app.
Install the keyboard autotype plugin for Keepass2Android!
Sometimes you have to long press on the password box and bitwarden might appear or a little “autofill” option may appear along in the 3 vertical dots pop up. Most of the time, Bitwarden auto pops up for me.
I feel like if you’re already using Bitwarden and you’re talking to us on Lemmy, you’re not tech illiterate.
Try the free version and switch to premium if you like it better than bitwarden.
In terms of “Free version”, what would be better? What would you recommend if I were to use one as Premium (daily use) and the other as Free (for backup purpose)?
Idk its up to you really try both out and go with what you like and buy a premium for what you decide to use daily .
Which sites or apps does it not pop up? It is rare for it not to pop up for me.
Proton is almost exclusively “miss” so that’s a giant no from me.
Same problem on 1password.
As a mobile developer I can tell you that working with Android keyboards has been a giant fucking pain in ass since inception to today.
While I can’t speak specifically to why they both seem to have this problem, I wouldn’t be surprised if the OS is part of the problem.
I wouldn’t be shocked that if someone had it working consistently, it might be because of the most heinous hacks, or private greylisted APIs or some other nonsense.
I do remember trying several different keyboard apps, but none works consistently enough and some don’t even work at all.
I like anysoft. The autofill thing for bitwarden sometimes takes a second but it always shows up.
I’ll take KeepassXC and KeepassDX + SyncThing, just works and I don’t have to ever rely on someone else for my most sensitive data.
This. At least until i find a better solution than syncthing. But keepass(xc) all the way.
I tried Google Drive, and also Seafile. the catch is that it needs to sync the files to your phones local file system. You could also do Next cloud or use Folder sync. https://play.google.com/store/apps/details?id=dk.tacit.android.foldersync.lite
Problem is, i want to exclude third parties. I’d prefer a direct heavily encrypted connection directly to my server. Definitely not a cloud somewhere, especially not google & co.
Nextcloud is way too blown up and vulnerable for me. I really only need file-synching. Got servers working for the other stuff like caldav.
i use Termux and just scp/rsync my stuff around.
ideallyi’d use Unison sync inside termux, but it hasnt been packaged and i dont know the first thing about ocaml, so it’d be hard for me to make the needed adjustments to package it.
Termux/Rsync is nice and all, but not really a comfy fire’n’forget-solution like syncthing.
And today i heard the first time of unison sync. So i have no opinion at all here, but thanks for the hint.
deleted by creator
Drive is under a different org:
deleted by creator
For me keepassxc is a dramatic improvement over a centralised service.
I use both and am afraid that I will lose the passwords in Proton Pass as Its a service they can restrict me of.
I should startto copy some accountd that I dont have yet in keepass but keepass is still the master holder
I’m not really sure what happens if Proton bans your account for any reason but Proton Pass does have offline access. I assume if you turn off internet access, you can still get all your passwords.
Is that not the same risk vith bitwarden too
Bitwarden has a really nice CLI that lets you backup your vault easily. I personally run
bw export --format json --rawevery few week so if for some reason I lose the “cloud” access, I can still migrate to self hosted or a different password manager. (Or you may choose to self-host to begin with)The danger with self hosting is that police can always steal everything from you.
Felt weird hearing story of my ex that the german customs office just stole their Laptop and Phone. She couldn’t show me pictures and she hadn’t any backups or smth.
I am afraid this could happen to me too when they suspect something but are wrong at the end. At the entire time I will not have access to my drives of my server and maybe they accidentally break them. Not sure if they will believe me that its a raid 1, I can imagine them stealing everything without questioning.
I wonder how to comfortable sync a 2TB drive and take it with you.
Additionally. I dont do backups. I only sync devices. Except for Phone pictures which are uploaded and deleted from the phone. I think there should be a second device that keeps data
> I dont do backups
Well then… there is nothing good coming out of that decision. Good luck, lol.
Great to know!
How does it compare to vaultwarden/bitwarden?
When it launched the apps were more modern than bitwarden. If bitwarden hasn’t improved since, then it’s still the same
Bitwarden’s interface hasn’t changed a bit and it’s a pity
Whats wrong with it?
Bitwarden is excellent but i have a few nitpicks on Android.
I wish I could change the “Username” field to “Email address” because it kind of annoys me having email addresses under usernames. I’d also like to add things to favourites or folders without having to go into edit mode on every entry individually. Same with adding notes. The app has trouble following the system theme and doesn’t always autofill reliably for me, meaning I sometimes have to go into the app and copy/paste my passwords manually.
Other than that, the UI is just a bit ugly compared to some other password managers,
Try Keyguard, it is open source and much nicer than the regular Bitwarden app. Do not use the version from the Play Store though, get it directly from Github.
It’s not open source. Only source available unfortunately.
I did not realize that. That explains why it’s not on F-Droid. Really unfortunate but at least it can still be publicly audited.
Huh, this is the first time I heard about this, thanks for sharing!
Do not use the version from the Play Store though, get it directly from Github.
Why? I use Vaultwarden with Bitwarden from the Playstore is there anything wrong with it?
The version on the Play Store requires a “premium” subscription for some features but the Github release gets those for free.
There is no guarantee that play store build contains the same code as GitHub repository. Ideally you’d need to compile apps yourself.
But most of the time stuff like vaultwarden is trustworthy enough.
Thank you, I will have a look at this!
Weren’t they planning to change it from Microsoft’s Android UI, it’s just taking a while, as they have to rebuilt it from scratch? I thought I saw something about that.
Correct, they announced it two months ago: https://www.androidpolice.com/bitwarden-app-about-prettier/
There is nothing wrong with it. Why people always want things to be changing? What really important feature are you missing?
And what better person to answer that question than Mr. Bitwarden himself:
https://www.reddit.com/r/Bitwarden/comments/1b32bbz/going_native_the_future_of_the_bitwarden_mobile/
Looks like everything is essentially in the same spot UI wise, but with a native application that hopefully gets moving a lot faster.
I’ve noticed that currently on Bitwarden, for auto fill it takes 6-7 seconds just to get authenticated with fingerprint and fill in the username and password field. That should hopefully be down to like 2 or 3 seconds.
A few for me:
- Automatically updating entries with app or URL information if they didn’t match and you had to manually search for them. You have to copy the URL, leave the browser, open the app, search for the entry again, and manually add the URL in the current version.
- Better defaults in the app like which group you log in to or which collection new entries are added to. Keeping all your entries added to a shared collection is a constant chore right now.
- Better keyboard functionality. It’s basically impossible to navigate with a keyboard on PC right now. Keepass has a global auto type hotkey which made it so you hardly even had to open the app.
a new client is on the way btw https://www.youtube.com/watch?v=-rVQOESKbbA
Do you know if there’s a new interface coming for android as well?
Thanks for sharing, thats exciting!
The new client will use Material You.
Thats dope! I’ll be looking forward to it, thanks for sharing your knowledge of what’s going on ☺️
Here is an alternative Piped link(s):
https://www.piped.video/watch?v=-rVQOESKbbA
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I’m open-source; check me out at GitHub.
good bot!
It’s about to get Material You
What do you feel it’s missing? It’s a tad slower than I’d like but otherwise works quite well.
I don’t think protonpass has auto fill even on browser extension.
Or maybe I’m too stupid to figure it out. I ran side by side against bitwarden which I love. Could not figure out a way that didn’t make me manually c/p the creds.
Neat, I’m personally gonna keep with KeepassDX, but it’s good knowing that there’s some more variety popping up in the mobile market.
Don’t put all your eggs in one basket
Very much agree
I use protonmail and very happy with that, so much so I pay for it.
But I would not place my mail and all my secrets in the same spot.
for the love of god use a free open source app like keepass, this is a untrustworthy company
I’ve been using Keepass like more than 5 years. And its perfect.
Which F-Droid client is that?
it’s the standard one
Looks like the standard F-Droid client
Oh wait it’s not, F-Droid doesn’t show the file size at the top
Yeah everything except the file size showing checks out
Edit : maybe it is the new versions or beta which most of us don’t have as it is not suggested .
huh, my standard f-droid client does show the file size
Or even better use a local password manager. People will be swallowed by so much false comfort
keepass is local
Isn’t keepass local?
I mean, it is as trustworthy as any for-profit company can be. KeePass is great if you have the technical knowledge and time required to set up and manage it properly.
both of them you download and use, it requires the smae amount of technical knowledge. in fact you could argue, that proton pass takes more technical expertise since you need to set up a account online first.
Sure, if you’re okay with losing all of your passwords when your phone dies. But that’s not realistic.
If you don’t you’re going to have to find a way to back them up, which is considerably more convoluted.
Long time Bitwarden user. Never been steered wrong. One of the few apps that I pay for premium not because I need the extra features, but because I value it enough to support the devs financially
Proton VPN and nothing more.
Hanno iniziato da un po’ di tempo a fornire troppi servizi, dovrebbero focalizzarsi di più a sistemare quelli che hanno. La webmail di Protonmail è un abominio: perdita di selezione multipla aprendo un’email, email che ricompaiono subito dopo averle cancellate, ricerca…stendiamo un velo pietoso!
deleted by creator
